Static task
static1
Behavioral task
behavioral1
Sample
de44fab031822cde7937c0ac77a9d9fd_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
de44fab031822cde7937c0ac77a9d9fd_JaffaCakes118
-
Size
920KB
-
MD5
de44fab031822cde7937c0ac77a9d9fd
-
SHA1
4bd10ba8fffdf7c9bae96a56c3c7b1873fd03985
-
SHA256
fc694ec63a52725b50b2d208b510b23ed36e3115c411aabe8964c34ac393cbc6
-
SHA512
f92917d72bf495d8abb9e38b9a74c8a453bde7345b450fe6ea72b12106d2c85dd211383532df7050e7cf41592652220adbd4c53d51d91fc8b001b276b4f4ecc8
-
SSDEEP
24576:QEXv7J8gOIUje+i8Qdo1irOfbbGeVOfUa20:QE/y7iQ1f8s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de44fab031822cde7937c0ac77a9d9fd_JaffaCakes118
Files
-
de44fab031822cde7937c0ac77a9d9fd_JaffaCakes118.exe windows:4 windows x86 arch:x86
ac5547a4cef5a0a41523374a369ff4b1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
CreateFileA
Sections
xesxdtme Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
veqjodqs Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
emlvewnr Size: 790KB - Virtual size: 796KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hqwrmvvg Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE